“Security scanning”

Runs security audits on codebases — full scans, diff reviews, threat models, vulnerability triage, remediation guidance, and finding tracking.

Deep, multi-agent security audit of a codebase — WordPress plugin, Laravel, Next.js, Node/Express, Django/Rails, or any app.

Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons.

Triage, redact, clean up, and resolve OpenClaw GitHub Secret Scanning alerts in issues or PRs.

Scan a codebase and its git history for exposed secrets — API keys, tokens, private keys, passwords — and block them before they ship.

Security review and safe-op patterns.

Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge.

Audits a third-party or freshly cloned repo before install or run for install hooks, auto-run files, CVEs, typosquats, and malicious code, graded A-F with a…

Automated vulnerability scanner for agent platforms.

Maintainer-only workflow for handling GitHub Secret Scanning alerts on Enclawed.

Scan OpenClaw skill folders for security red flags before installing or publishing.

Audits and progressively hardens Xcode security build settings for a Capacitor iOS app (ios/App/App.xcodeproj, scheme App) and native plugin code…

Security audit of a codebase — web apps, APIs, services, CLI tools, libraries, daemons, and more.

Scan a project to identify Kafka applications, extract schemas from data models, tag PII fields, generate Terraform for Confluent Schema Registry…

Run the pre-publish security audit for every publishable @tetherto/mdk-* package (or any non-private package in an npm monorepo).

Scan project and generate/audit CLAUDE.md files with stack auto-detection and Context7 docs.

Run or install repo security leak checks with BetterLeaks and Trivy.

Handle a security incident through the NIST SP 800-61 lifecycle — validate and scope the signal, build a timestamped fact timeline, classify severity, plan…

Perform an explicitly requested local or offline source security audit when a hosted scanner is unavailable or a portable audit is requested; preserve…

Comprehensive OWASP-aligned security guidance across six standards - Top 10 (2021) for web apps, ASVS 5.0, MASVS v2.1.0 for mobile, API Security Top 10…

Use when the user asks to detect, scan, audit, score, or flag AI-writing patterns without rewriting the text, including requests for a deterministic local…

OWASP-grounded code security reviews and offensive audits with exploit proof.

Comprehensive security audit, hardening, and automated penetration testing suite.

360-degree comprehensive security review Skill.